$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa File: 11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa (raw, json) Hash identifier: dPKJZN6fC7U8LKr05/SsOkBZJbLkA2FAYbXunW3E2OQ= Subject key identifier: 44:65:35:F2:DB:F5:52:0B:33:03:4A:8C:88:75:7B:BD:8A:A7:B0:27 Certificate issuer: /CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Certificate serial: 010D0C9F43285848EC96A4385890DDD6C6B74800 Authority key identifier: 73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 394144 IP address blocks: 23.143.8.0/24 maxlen: 24 130.51.127.0/24 maxlen: 24 2602:27c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:a4:38:58:90:dd:d6:c6:b7:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b978a-944a-401c-aa25-2ebbd4d58340 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=364df7b3-b4a7-4523-8bda-1cc2ee8085d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0b:29:d3:00:13:61:36:93:4e:ac:45:7b:40: b1:eb:9f:b9:8b:0e:77:14:ee:18:42:54:cb:7d:09: 1f:a0:af:dd:d5:cf:81:18:d2:33:44:7f:6d:be:38: 5a:b0:dd:9f:31:b5:ea:6c:57:50:25:5b:9a:97:3f: 75:e3:60:c8:05:cc:65:7c:84:7b:5d:fc:3a:f1:62: ad:43:d2:89:e5:e5:84:79:0d:91:3f:2d:74:12:83: c6:b9:b9:de:0c:e7:c6:09:36:16:dc:22:74:7f:1f: 4a:0d:95:f5:ae:b7:db:0d:2d:b4:d4:51:6a:ea:79: a2:1b:d0:38:54:6d:ab:22:da:bc:c4:5c:a1:8a:a3: 38:c1:a1:1e:d1:db:85:5c:b1:48:53:33:c9:4f:a8: 83:4b:28:e2:d9:0b:9c:d9:b9:64:9d:8c:f3:8e:54: a9:d2:e9:62:b6:60:76:fc:2f:6d:fa:a5:19:5d:96: 59:83:01:d4:ef:c7:39:ce:2d:80:27:58:09:c7:36: 7f:9c:58:5a:86:aa:f3:7f:96:10:cf:43:d9:35:ce: 54:d2:02:5d:30:62:08:29:7c:e2:57:f6:a6:e8:fb: cb:38:13:19:8c:bf:70:c8:cd:82:d6:ce:6e:5d:34: bf:1a:40:37:c6:ae:aa:57:52:50:4f:33:a1:20:8a: a8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:35:F2:DB:F5:52:0B:33:03:4A:8C:88:75:7B:BD:8A:A7:B0:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/11d2bbe1-6b46-36d3-9897-9ff310fb7e69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340/d70b978a-944a-401c-aa25-2ebbd4d58340.crl X509v3 Authority Key Identifier: keyid:73:1F:5D:9D:14:F3:A7:ED:C2:34:6A:74:2A:64:CB:70:AA:FF:2E:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d70b978a-944a-401c-aa25-2ebbd4d58340.cer sbgp-ipAddrBlock: critical IPv4: 23.143.8.0/24 130.51.127.0/24 IPv6: 2602:27c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:dd:5d:7c:d5:f3:b5:e1:24:f2:b9:84:ba:7e:7d:49:41:cb: 1d:31:bb:c2:b2:b1:a1:b2:58:29:30:71:8d:07:f4:15:25:a4: f5:38:9d:45:b2:27:06:af:d4:7d:da:7c:3d:ef:de:d3:c1:09: 9f:f0:47:ec:bc:3c:d5:70:09:6d:d3:27:b7:13:75:d1:89:79: 8b:a2:de:f9:6d:98:89:44:ce:39:54:8a:e5:38:fa:e6:43:1d: ae:a7:c6:bc:09:2d:91:42:db:41:7d:b1:27:80:02:4f:a7:90: 63:0a:91:66:03:86:b2:4a:8b:e5:c4:a2:48:e0:06:00:c6:06: 77:64:35:34:ef:ef:98:50:95:d0:f8:be:1d:a3:26:b6:18:4a: e5:bd:23:55:43:22:1a:5d:bb:66:95:bc:f9:d9:30:27:ef:76: b8:af:45:c9:eb:e5:d4:71:a4:b2:33:8e:2c:fc:69:69:52:97: 03:96:8c:88:1b:03:c9:74:7f:ed:50:89:54:c6:8c:44:5b:fe: e5:8c:77:ff:6f:59:56:22:de:68:d5:a8:28:8f:f0:e7:5e:1a: ad:9f:33:8a:61:74:ec:c5:b2:31:48:e5:5e:61:f5:41:63:e1: ba:f2:ec:c9:b2:04:e6:c2:32:13:b8:4a:a7:53:85:f1:a1:be: ee:10:17:dd -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEjslqQ4WJDd1sa3SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwYjk3OGEtOTQ0YS00MDFjLWFhMjUtMmViYmQ0ZDU4 MzQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MzY0ZGY3YjMtYjRhNy00NTIzLThiZGEtMWNjMmVlODA4NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygsp0wATYTaTTqxFe0Cx65+5iw53FO4YQlTL fQkfoK/d1c+BGNIzRH9tvjhasN2fMbXqbFdQJVualz9142DIBcxlfIR7Xfw68WKt Q9KJ5eWEeQ2RPy10EoPGubneDOfGCTYW3CJ0fx9KDZX1rrfbDS201FFq6nmiG9A4 VG2rItq8xFyhiqM4waEe0duFXLFIUzPJT6iDSyji2Quc2blknYzzjlSp0ulitmB2 /C9t+qUZXZZZgwHU78c5zi2AJ1gJxzZ/nFhahqrzf5YQz0PZNc5U0gJdMGIIKXzi V/am6PvLOBMZjL9wyM2C1s5uXTS/GkA3xq6qV1JQTzOhIIqo2wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFERlNfLb9VILMwNKjIh1e72Kp7AnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBi OTc4YS05NDRhLTQwMWMtYWEyNS0yZWJiZDRkNTgzNDAvMTFkMmJiZTEtNmI0Ni0z NmQzLTk4OTctOWZmMzEwZmI3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwYjk3OGEtOTQ0YS00MDFjLWFh MjUtMmViYmQ0ZDU4MzQwL2Q3MGI5NzhhLTk0NGEtNDAxYy1hYTI1LTJlYmJkNGQ1 ODM0MC5jcmwwHwYDVR0jBBgwFoAUcx9dnRTzp+3CNGp0KmTLcKr/LnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzBiOTc4YS05NDRhLTQwMWMtYWEyNS0yZWJi ZDRkNTgzNDAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF48IAwQA gjN/MA4EAgACMAgDBgQmAgJ8ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk3V181fO14STyuYS6fn1JQcsd MbvCsrGhslgpMHGNB/QVJaT1OJ1FsicGr9R92nw9797TwQmf8EfsvDzVcAlt0ye3 E3XRiXmLot75bZiJRM45VIrlOPrmQx2up8a8CS2RQttBfbEngAJPp5BjCpFmA4ay SovlxKJI4AYAxgZ3ZDU07++YUJXQ+L4doya2GErlvSNVQyIaXbtmlbz52TAn73a4 r0XJ6+XUcaSyM44s/GlpUpcDloyIGwPJdH/tUIlUxoxEW/7ljHf/b1lWIt5o1ago j/DnXhqtnzOKYXTsxbIxSOVeYfVBY+G68uzJsgTmwjITuEqnU4Xxob7uEBfd -----END CERTIFICATE-----Generated at Mon Apr 7 21:06:23 2025 by rpki-client